Oliver Haufe

Hi Patrick, Thanks for the log. I don't know the tons of configuration options at an OIDC provider. JOC must be configured as a "Single -Page Application". It looks like it is configured as a "Web Application". Otherwise you get what you got: "error_description":"AADSTS9002326: Cross-origin token redemption is permitted only for the 'Single-Page Application' client-type... Best regards Oliver

Hi Patrick, Thanks for your efforts. I would be interested in seeing the content of ./jettybase/logs/authentication-debug.log (in version 2.7.6). To get this log file to be generated, log levels must be set in ./jettybase/resources/joc/log4j2.xml. <!-- Log level of the Root Logger. --> <Property name="RootLogLevel">DEBUG</Property> ... <Property name="AuthLogLevel">DEBUG</Property> Please restart JOC Cockpit after the change in log4j2.xml and try the login once more. Best regards Oliver

Hi Patrick, The problem in your environment requires further analysis. You can help us with this. Please repeat the login with version 2.7.6. Best regards Oliver

Thank you for your feedback and cooperation. Best regards Oliver

Hi Daniel, patches that should solve the problem are attached to https://change.sos-berlin.com/browse/JOC-2102 Best regards Olli

Hi Daniel, thanks for the responses. Let's go back to the “Single Page Application” setting and try again. Then you will find a line in the log file with GetOpenIdConfiguration - RESPONSE:{...} before the login fails. This response contains values for * "token_endpoint" * "token_endpoint_auth_methods_supported" Please tell me if the value of "token_endpoint" contains "/v2.0"? Please post here the value of "token_endpoint_auth_methods_supported". Best regards Oliver

Hi Daniel, logging requests and responses is helpful for further analysis, which is currently missing. I have provided this as a patch for version 2.7.5; see https://change.sos-berlin.com/browse/JOC-2100 Please use this patch to see more in the authentication-debug.log Best regards Oliver

Service Joc Cockipt failed to start - V2.6.3